SECURITY WARNINGS & Notices - Please post them here

[bob3160]

@ Bob
What is dangerous is the fact that the user has no way of identifying where the link leads to without clicking on the link. So there is an element of blind trust when using URL shortening methods.

I already use Long URL Mobile Expander add-on in FF, but it doesn't cover all or goo.gl being one such instance.

@ polonus
The 2nd link urlexpander, isn't as convenient as the Long URL Mobile Expander add-on as it appears to be on-line only - there is also a problem on the site any shortened url entered results in an application error. So not very good.

Google also checks the links it shortens for possible infections.   One of the reasons I use their service and not any of the others.
More information available at:
http://support.google.com/websearch/bin/answer.py?hl=en&answer=190768

[DavidR]

I just don't trust what I can't make an informed decision about and as for google checking the content, google searches, in particular image searches are rife with malware redirections (lots of instances seen in the forums). So excuse me if I don't trust google when it comes to cleaning their house.

[bob3160]

I just don't trust what I can't make an informed decision about and as for google checking the content, google searches, in particular image searches are rife with malware redirections (lots of instances seen in the forums). So excuse me if I don't trust google when it comes to cleaning their house.

I don't pass along other peoples shortened link but, it's certainly easier to post the following:
http://goo.gl/VLXde
Instead of:
https://docs.google.com/document/d/1TCCX0R7AAF2WOxAMQ_kcun2nNnCPFAk2P4RBzFXSgds/edit
Since I know these are safe, the short link makes it easier for everyone.
Yes, you need to have some trust in the person who is passing this shortened link to you.

[DavidR]

Yes its shorter, but so is A Google link and from that you can hover over the link and see where it leads.

[!Donovan]

And what if you're using a mobile device? One cannot hover over the link, so would the average user know the difference between the two?

People of my age group tend to disregard the url completely, possibly because there are no "preview urls" featured in mobile devices.

~!Donovan

[polonus]

@DavidR,

Thanks for the additional info and the good advice. On Google Chrome browser I use  Long URL extension: https://chrome.google.com/webstore/detail/longurl/oldnehmjgfcannmkgkojafngdkhfkdpd
LongURL will replace shortened links using LongURL API This works fine for me,

@! Donovan, would use this also in your case as an apps: https://play.google.com/store/apps/details?id=com.tseng.longurlexp&hl=nl

pol

[polonus]

So conclusion here is to always use an expander for short URLs both on conventional comps and smartphones,

pol

[polonus]

Hi malware sites that should fill the DNS sinkhole: http://www.malware-domains.com/
All files located here: http://www.malware-domains.com/files/

polonus

[polonus]

At least folks, do you hold these "immortals" blocked?

Immortals are long oustanding malware launching domains,
domains with a long lasting and continued history of spreading malcode,
or with the so-called "Long OVERDUE status".

An IDS list for them can be found here: http://www.autoshun.org/downloads/immortal_bhdns.rules
Or download the immortal_domains file from here: http://www.malware-domains.com/files/immortal_domains.zip

enjoy,

polonus

[polonus]

IP/hex/q.php hacks -> http://arstechnica.com/security/2013/04/exclusive-ongoing-malware-attack-targeting-apache-hijacks-20000-sites/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+arstechnica%2Ftechnology-lab+(Ars+Technica%3A+Technology+Lab)
Link article author: Aurich Lawson / Thinkstock
From the PHP manual to understand the attack better: http://php.net/manual/en/function.ip2long.php
The initial way the hack was performed is as yet not quite clear....

polonus

[Asyn]

Microsoft Security Bulletin Advance Notification for April 2013
http://technet.microsoft.com/en-us/security/bulletin/ms13-apr

[REDACTED]

Nasty Trojan infects 100 hosts in sixty minutes

http://news.drweb.com/show/?i=3437&lng=en&c=14
http://vms.drweb.com/virus/?i=2019633

Win32:Kryptik-LFQ [Trj] - Avast users are protected

http://r.virscan.org/f95b06ee9a21bee660538ebcbdefcc53
http://r.virscan.org/12d2b7dce9809d51345920cb3d6c205e

[REDACTED]

Banking Trojan Carberp: An Epitaph?

https://blog.avast.com/2013/04/08/carberp_epitaph/

[Asyn]

KB2839011 Released to Address Security Bulletin Update Issue
http://blogs.technet.com/b/msrc/archive/2013/04/11/kb2839011-released-to-address-security-bulletin-update-issue.aspx
http://support.microsoft.com/kb/2839011

[mchain]

KB2839011 Released to Address Security Bulletin Update Issue
http://blogs.technet.com/b/msrc/archive/2013/04/11/kb2839011-released-to-address-security-bulletin-update-issue.aspx
http://support.microsoft.com/kb/2839011

There are some reports that TrendMicro is also affected by this security update issue.